Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
File:                     G6b_I23_7pYJaapF2ZXZb-TSmPE.mft (raw, json)
Hash identifier:          fB+KxxUkMkH6rQ1UVMvL2Eg3ciUaU8QaTHkLA6L19lo=
Subject key identifier:   A0:5C:0C:83:DF:73:89:AE:95:87:8B:74:BB:2D:92:D0:DE:3A:22:9C
Authority key identifier: 1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1
Certificate issuer:       /CN=A9194AE2/serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
Manifest number:          49
Signing time:             Mon 25 Nov 2024 05:15:18 +0000
Manifest this update:     Mon 25 Nov 2024 05:15:18 +0000
Manifest next update:     Mon 02 Dec 2024 05:15:18 +0000
Files and hashes:         1: G6b_I23_7pYJaapF2ZXZb-TSmPE.crl (hash: h9j63PUCiSIqMUVl3F0sHk0h1sPyqQ5m+mC/Mcud5qU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl
                          rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 04:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AE2/serialNumber=1BA6FF236DFFEE960969AA45D995D96FE4D298F1
        Validity
            Not Before: Nov 25 05:15:18 2024 GMT
            Not After : Dec  2 05:15:18 2024 GMT
        Subject: CN=674407e6-cb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:8f:e1:78:f9:ba:c6:c7:88:aa:21:41:49:
                    07:e4:13:a3:33:ca:64:42:b8:99:88:41:af:62:b9:
                    1f:65:e2:ff:04:be:d1:21:db:4e:0a:cd:75:48:63:
                    85:3b:66:e4:c6:12:44:18:4c:e7:7b:7b:ae:00:04:
                    7d:d6:3f:a0:bf:27:0a:86:c4:11:4f:3e:e0:71:ff:
                    bc:99:52:d0:40:96:3b:7e:37:31:f8:ac:89:32:78:
                    b3:c0:87:af:a8:8c:a5:92:c1:29:72:93:24:81:79:
                    fb:9b:49:eb:ab:08:b8:11:ab:16:f2:77:cb:b5:77:
                    80:c1:85:d1:6d:da:9f:89:1d:9a:0f:23:f6:84:6d:
                    c8:fd:08:49:a6:2a:d7:6d:6d:ae:a2:6a:40:7f:52:
                    c6:8e:52:b0:59:21:44:1f:05:85:72:b4:74:2c:f6:
                    d7:dd:69:fc:e5:9c:06:f8:73:d3:14:f6:cb:ba:49:
                    56:90:0a:f7:4d:61:cd:95:47:f5:11:35:9b:91:6c:
                    17:1e:49:d5:ec:bf:d9:c0:c7:e5:ca:2d:c3:62:3f:
                    75:1b:20:04:8c:08:12:c9:19:3a:d5:6d:43:33:be:
                    4c:ce:e8:40:09:63:7f:de:51:0a:0d:9a:30:19:47:
                    5f:12:00:bc:8d:46:d4:f0:94:bb:96:34:d4:e0:da:
                    e5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5C:0C:83:DF:73:89:AE:95:87:8B:74:BB:2D:92:D0:DE:3A:22:9C
            X509v3 Authority Key Identifier:
                keyid:1B:A6:FF:23:6D:FF:EE:96:09:69:AA:45:D9:95:D9:6F:E4:D2:98:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6b_I23_7pYJaapF2ZXZb-TSmPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/2F03F57C3BAC11EF9D7EA871C4F9AE02/G6b_I23_7pYJaapF2ZXZb-TSmPE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e7:21:0e:57:df:71:55:36:68:86:ef:e4:66:0d:5b:4c:8b:
         07:f9:f3:ec:21:84:41:92:d1:60:c1:a9:5f:da:1f:46:98:d0:
         2c:49:cb:b8:13:4e:e0:07:95:a5:9a:98:db:42:b8:08:94:77:
         3d:5c:dd:98:10:a6:e5:61:e3:3a:5a:17:ce:ed:e1:04:67:3a:
         cc:cc:da:50:ee:b1:d8:8e:ac:57:e0:6e:2b:4f:17:25:c7:a6:
         44:8f:3f:83:23:99:89:7c:d0:da:ab:bb:0f:d3:2f:8a:ae:22:
         3e:8c:96:2f:38:cb:c2:a5:81:28:54:a4:80:13:b3:b3:3c:69:
         e6:67:cd:5b:4e:2d:b1:20:63:c1:02:17:80:96:da:b9:a0:1e:
         09:89:f0:4b:f8:a3:53:3a:3e:a2:6a:c6:fb:17:49:bf:e7:ef:
         f7:dd:41:d4:5e:fd:8c:af:81:5b:0d:25:70:dd:17:ab:55:26:
         76:04:42:17:f2:08:fc:a5:90:38:38:5b:0f:f0:59:0e:fb:ef:
         15:4f:60:2a:9c:7c:92:20:ef:fd:a7:30:37:37:a1:5a:2a:21:
         83:6b:17:4b:9d:82:50:e5:bc:6e:de:28:e0:5a:05:71:96:75:
         4e:3a:e8:c4:ed:47:5d:94:31:f9:cd:c6:9c:64:dd:ff:f5:d7:
         de:6c:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:13 2024 by rpki-client on console-ams.rpki-client.org